Beyond Prompt Injection: Trust-Boundary Security Assurance for LLM-Integrated and Agentic Applications

Abstract

Abstract Large language model (LLM) applications increasingly combine probabilistic language interpretation with retrieval, persistent memory, external tools, and delegated enterprise credentials. This creates a system-security problem in which untrusted semantic content can cross trust boundaries and acquire operational authority. Existing work provides prompt-injection attacks, agent benchmarks, risk taxonomies, and governance guidance, but less directly addresses how those threats should be t

Categories

Framework mappings

Suggested from the entry's categories.

@misc{waheed2026beyond,
  title = {{Beyond Prompt Injection: Trust-Boundary Security Assurance for LLM-Integrated and Agentic Applications}},
  author = {Nazar Waheed},
  year = {2026},
  month = sep,
  doi = {10.21203/rs.3.rs-10798245/v1},
  url = {https://doi.org/10.21203/rs.3.rs-10798245/v1}
}